diff --git a/nixos/vault-warden.nix b/nixos/vault-warden.nix
index 88009bb..9225dbb 100644
--- a/nixos/vault-warden.nix
+++ b/nixos/vault-warden.nix
@@ -4,11 +4,24 @@
   services.vaultwarden = {
     enable = true;
     config = {
-      domain = "https://vault.sincerity.network:8443";
+      domain = "https://vault.sincerity.network";
       signupsAllowed = false;
-      rocketPort = 8222;
+      rocketPort = 3011;
       rocketLog = "critical";
     };
     dbBackend = "sqlite";
   };
+
+  services.nginx = {
+    virtualHosts."vault.sincerity.network" = {
+      useACMEHost = "sincerity.network";
+      forceSSL = true;
+      extraConfig = ''
+        client_max_body_size 128M;
+      '';
+      locations."/" = {
+        proxyPass = "http://localhost:3011";
+      };
+    };
+  };
 }